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[57] ABSTRACT 

A method add systOSf for transparently executing code using 
a surrogaceis-occss fo provided. In a preferred emtxxliment, 
the underlying system provides a surrogate program that can 
execute server dyoaEUic-link Hhraries. When a client prK>- 
gram wishes to access an object of a sharable class or a dass 
factory object, the efient program requests a sovicc control 
manager to execute Qle server code for Ihc sharable class. In 
response, the serdm control manager determines ftom a 
registration database whether the server code is available in 
the form of a server otecutable or a server dynamic-link 
lihraiy. If the server code is inqslemented as a serva 
dynamie^flnk librai^ the service control manager either 
returns the location of the server dynamic-link library to the 
client program to bticn in the executioa context of the dient 
program er the sen^BC control managei launches the suxxo- 
gate program and le^ests it to load the server dynamic-link 
lihiBiy, thereby isoteling the server dynamic-link library 
finom (he dient progmm execution context When the sur- 
rogate process is httttdied, the surrogate process loads die 
requested^ervcr dynamic-link library and instantiates dass 
factory objects ooii«l|)onding to the sharable dasses in?>le- 
mented ty the Wtvcr dynamic-link library. In one 
embodimeat, mult^t^ server dynamic-link lihrancs can be 
loaded wfttdn the sate surrogate jMocess. According to this 
embodiment, when fte dient program requests access to an 
objea of a sharable dass or to a dass factory object, the 
service control manager ddcrmines whether the server code 
that implements the object can be loaded in a surrogate 
process that is ahrea^ exectiting or whether a new surrogate 
process needs to betenchcd. Once die server dynamic-link 
library is loaded in tfte surrogate process and a retrace to 
a server object rednned to the dient program, the dient 
prc^ram can oomrntmicatc with the server code in the same 
manner as if the sc*Vcr code had been loaded into the 
execution context of fiie dient program. 

56 dates, 13 Drawing Sheets 
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METHOD AND SYSTEM FOR provide ||| lnwtoary process (hat Is used bv each client 

'^^^'i'^'' EXECUTING CODE ^ tO^^cfcod^ S kSSa^Sss 

USING A SURROGAIX PROCESS determiiieS whetto to nin the stiver codeT7s?^te 

CROSS-REFERENCE TO RELATPD ^ ^ Uxi^ ii into the intcnncdiary process. The 

^^l^im^^^ ' disadvantage to m approach is that eadi cUent program 

^ needs to be awaro.of whether the server code is being 

This qjplication is a continuation of U.S. patent applica- accessed throng «0 intermediary process ca* is loaded into 

tion Scr. No. 08/499,417, filed JuL 7, 1995. 'he cxccutton comem of the dient fwoccss. because different 

r™-^TxvT^^ , conuniinlcationinBClianismsarcpro 

TECHNICAL FIELD lo an additional level of indirection is required to access the 

This invention relates generally to a computa method and ^^^^ tfi esch^c odc when the server code is accessed 

system for invoking code and, marc specifically, to a mahod ^ mtenattHary process. 

and system for transparently executing a dynamic-link present .i^v«!ttion is described below using some 

library in a surrogate process. object-oriented tedUiiques; thus, an overview of wcU-fcnown 

^ , ^ ^ object-orl«ited programming techniques is provided. T\vo 

BACKGROUND OF THE INVENTION common dharactcifctics of objectHoriented^rogramming 

In some ooit^>uting environments, code to be shared -^^^^^ ^ support for data encapsulation and data type 

among several cUcnt programs is implemented in an execute ""^tanoe* Data »c^sulation refers to the binding of 
able module caUed a Htrary. A Uhraiy can be either a 20 "^°'*^^^°^5^^*^<*'cferstot^^ 

static-link library or a dynamic-link bttary (a "DLL") We in terms «f other datatypes. In the C4+ language, 

Static-linklihraries require the code containcdin the cxecut- ^ wicapsulation^ inheritance arc supported througji the 

ahlc module to be copied into a client program executable U 1 ^ dass is a programmer-defined type. A class 

image before the cHent program is executed Thus, each P^«^<>tt <Jesc^ea.aie data mcanbers and function mem- 

dient program has its own copy <rf the executable module m ''^/^^ ^^^cticm meinba 

and the static-link library has access to the dient program members and function member 

code and data. In contrast to statio-link litcaries scvffal that the function opc^ 

ciient programs can share a single ccpy of the code con- ^ instance (an aQocated occonencc) of the dass. An 

tained in a DLL, which saves memory space The loading in^cc of a dass it also caUcd an object of (he class or an 
and Unking of the DLL is performed as the program m ^ ^ "^sjancc. Thos, a dass provides a definition for a 

executes. In some in5)lemcntations. information regarding objects vm similar properties and common behav- 

thelocationaf the shared code in the DLL is placed m die t 

executable image of each dient program for later access. '^^ allocate sflonA^ for an olgect of a particular class 

Setting up this access is referred to as loading, even tisough (*ypc). an object Is fttstantiated (an instance of the dass is 
the code image is not copied. Typically, DLLs are executed 35 created). Oiicc itt f ittt f tin t ed, dahi can be assigned to the data 

in the context of the calling code; that is, &e DLL can access nwmbers of thcpartifeilar object Also, once instantiated, the 

the code, data space, and Ac stack space of the ciient ^'^^^^^on incinbers otthe particular object can be invoked to 

program diat invoked a function contained in the DLL m fl n^ >i46 t e the data members. Thus, in this 

Therefore, DLLs like static-link libraries have access to flie ^n^CTj tbc functiojpf members irz^lcment the bdiavicr of 

ciient program cxccuti(Hi context As a result, potential 40 and the Olfjcct provides a structure for tucapai-^ 

scajrity problems are created in that errant or ill-bdiAved and behd9j<H' into a single entity, 

code in a dynamic-lint litaiy can oonupt portions of the To support tiie coacept of inhaitancc, dasses may be 

dacnt program context in which the library is being dedved firom (based t^wn the declaration of) other classes, 

executed. A derived dass is a ^s tiiat inherits the characteristics-^ 
In an objectKJrientcd environment, die code in^lcmcniing 45 *^nicmbers and fiaEctionmcmbecs---of its base classes. A 

the various available objects can be used by nmltq)le dient ^ inherits tba characteristics of another dass is a 

programs. Objeds are typically implemwited by server code derived dass. A dasa that does not inherit the cfaaractoistics 

that provides the behavior of the object (An introduction to anodicr dass Is a primary (root) class. A dass ^ose 

object-oriented concepts is discussed flmher bdow.) Clienl diaractcristics arc Inteited by another dass is a base dass. 
programs wishing to create, inooiparatc, or share objects so ^ ^ved dass m;^ inherit the diaractcristics of several 

impl e me nt ed by server code are required to access and daises; that is, a dittivcd class may have several base 

execute die JCTTopriate server code One current solutionis classes. This is ndoM to as multiple inheritance, 

fcff the server code inqilcmcnting each object to be executed A dass may also ^cdfy whether its fimction manber» 

alw^s as a separate process. Eadi client program that are virtual 'DedarinB that a functiOT member is virtual 

rcqimwaa^ss invokes the server code as a s<^^ 55 means fliat the fonrtto can be oveiridden by a fimc^^^ 

and tocn sends requests to the server code using any the same name in a derived class. If a virtual function is 

standard, wdl-known interprocess cwmnunication mecha- declared without pKWiding an unplementation then it is 

msm. HowevCT, hivokii^ the server code for each object as refared to as a pure ^«teual function. A pure virtual function 

a separate iHocess generates a large overhead of memory and « a virtual fimction telared with the pure specifier "=0- If 

other resource usage. Altemalivdy, some object-oriented 60 a dass q>edfies a pmt virtual function, then any derived 

systems require that all object server code is implemented in dass needs to spcdfy an inq)lementation for that function 

a static or dynamiclink library, which is loaded into each member before that ftmction member may be invoked. A 

dient process that desires to access the object in^lcmcnted dass whids contains at least one pure virtual function 

by the server code. As described earlier, one disadvantage of membo- is an abstxadi class. 

lequMng a dient process to load objects^ « FIG. 1 is a block «Bgram iUustratinff tvmcal data «tn,r 

dient program's context is that potential security problems tutcs used to icr^^f ^j^^^X^ 

arise. AS anomer alternative, other Object-Oriented syst^ instana dataX^S^^tSJ^^r^^ 
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inmlcmcnt the bdiavior of the object. The data structures parcntly excettlilig tiOdI using a suirogatc process In a 

^ to rqjrcscnt an object con^e instance data structure preferred crribodamau^ | surrogate prognun is provided for 

101 virtual function table 102. and the function members loading a server dynttaic-llnk library when the surrogate 

103! 104, 105. The instance data structure 101 contains a program is laundicd one embodiment, the surrogate 

pointer to the virtual function table 102 and contains data 5 program also create! {nstanccs of the dass factory object 

members. The virtual function table 102 contains an entry supported by the serWT dynamic-link library and registers 

for each virtual function member defined for the object. (jjem in a registration table. Once instances of the dass 

Each entry contains a reference to the code that inqilemcnts factcty object have Iw^n registered, a dient program can 

the corresponding function member. The layout of this communicate with fissm directly without t>eing aware of 

sample object conforms to models described in U.S. Pat No. whethci they have betolnstantiatcd in a surrogate process or 

5,297,284, entitled "A Method for Imidcmcnting Virtual ^ aanncr, fhO protection afifOTded by loading the 

Functions and Virtual Bases in a Coupler for an Objed ^ ^ suirtgflle process is provided transparently 

Oriented Programming Language," which is hffeby incOT- ^ ^^^^ ptoam 

porated by irfexence^One '^l^ed hi ^^^^ mother embodiffifiSit of the invention, a dient program 
that other object models can be defined ^5 requ^ aStimT^Wto^ess to an object or a dass fectory 

AD advantage of usmg objMi-onented teAmques is th^ S^A^^ oc^i^ provided by the under- 

multiple dient programs. To allow an object of an arbitrary server dynamiclink Hfcrary ( DLL"), or by l^unchu^ 
Sassto be shSred with a dient program, interfaces are 20 surrogate program as a surrogate process and reque^ 

defined throurfi which an object can be accessed without the load the server DLL. a surrogate process is laimdi<>l, the 

need for tiie cUcnt program to have access to the dass surrogate process loil^ the requested server DLL andare^ 

defimti<ms at con^ time. An interface is a named set of ates and registers ctoa factory objects corresponding to the 

logically related function members. In C++, an interface is sharable dasses implflftcnted by the server DLL 
an abstract dass with no data members and vfbosc virtual 25 jn another embodfaicnt, the client program controls 

functions are all pure. Urns, an interface provides a pib- whether a seivcr dyiamio-link library is executed in a 

lishcd protocol for independent pieces of code (or |OT>grams) sm^gate i^occss or Ittfte dient program execution cOTtext 

to communicate. Interfaces are typieally "s^^^^^Y)^ a^odier cndx)4tocnt, a laundied surrogate process 

new dasses: a server propm or ^^J^^J^^^^^ initiates a requested object and returns a pointer to a 

new dasses that provid^ 30 r^^intctfo^ instance. This interface 

^iSrSf^^fS'ed'S^ ^^^^^^^t^^^^'r^'^^'^ 

^.^^y^ <S^«mplementing partiaUar interfaces are serv« DLL executing in the surrogate proc«s rn^e same 

s^to siW«ts one or manna thf dient would access Ac saver DLL 

Sieint^Sd^ usii«,heikt«f«:epi4ntcrhaddie«^^ 

KG aisasymboUcrtpnssentationcf anobjcctlnthe ^ into the cxecutfon coKtcxt of the dicnt program, 

following desa^rtion , an object data structure is represented anotha embodfattnt, flic surrogate process is executed 

tw the shape 201 labdcd with the interfaces through which remotdy in a n^aitl enviroamcait A dient program on a 

the object may be accessed. As shown, object 201 supports ^J^cnt node requests t client service ccmtrol managa to 

imtofacel and nnterfacel access a create a pactftiilar object The cliait sendee confr^ 
When a client program desires to use an object, the dient * Q^maga then detcxmtoes upon ^x^di node the server c^ 

program needs access to the scrva code that in5)lements die should be executed Chd forwards the request to a server 

Interfaces for the sharaWe object (the class code for die service control mans^ on the determined network node, 

derived dass). To access the class code for the derived dass, server service t^ntcol manager on the serva node 

each dass implementation that is to be accessible (sharaWe) laundies a surrogate pix>cess and requests the surrogate 
is given a unique dass identifier (a "GLSIiyO. For example, 43 pj^jj^a ^ load the requested server code ccricsponding to 

sharable code in^Aemcntinga SP^«^^^^ Jl^^ the object in the cliW F^gram request 

ports the spreadsheet hitaf ace ^ ^^otha embOdJnTnt, multiple server DLLs can be 

SS^hk'w^^^ lold^ a single ^il^ogatepro^^ 
^SS^Sit S^iL ^Se^eet inSce 50 the sova code ^^^'J^^^^ 

dSvdo^by a^ oor^ Foccss cas be rcoflrt to load anotha 

r^lSr«iSdiec^^ m to one sdicmo, jQds ddoinhuhon f "P^^ 

Z a r^wtion databiSe) in ea(Acomputa system is security identity 6f fite requesting dient program and the 

maintaiSd that m/q)s eadi CLSID to the serva code diat con5>atibfllty of the sova DLLs ftom a security stam^int 

implements the sharable dass. Topically, when a spread- anotha embdt^oient, a surrogate process is used to 

sheet pix>gram is installed on a ccmpxtta system, the pa- ^ DLL dming the unmarshfllling of an interface 

sistent registry is updated to reflect the availability of that r^iaxei. 

class of spreadsheet objects. So long as a sprcadshat T^w^ci^ftttrrrnM ap xrr hraWINGS 

devdopa in^mcnts eadi fimctioa mcmba defined by the BRIEF DESOBPnON OF THE DRAWINGS 

interfacestobesupportedbysprcadshectotojectsandsolong p^j. 1 is a blodfdiagram illustrating typical data struc- 

as the persistent registry is maintained, the client program ^ represent an object 

can access the function members of shared spreadsheet j ia a symbolic reprcscatation of an object 

objects without regard to wWdi serva program has imple- 3 is an overview block diagram iUustrating object 

malted them or how ttiey have been in^acmcnted. activaticHi using a «mogale process. 

SUMMARY OF THE INVENTHDN ^ nO. 4 is a hlo<&aagram of a gencralpurpose conqwta 

The limitations of prior systons are ovacomc by the systanforpraOidltsaprefaredanbodimait of the present 

present invention, whidi is a method and system for trans- mvention. 
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SL^Lll""''®'^ initializing a then be eitecuted sep^ate?r^s 

^ / Also, the abiliiy to execute a server DLL in a smrogate 

WO. 6 IS an ovenaew block diagram illustrating object process useful toarotect server code from client code For 

activation using a surrogate process in a network environ- 3 example, an authflf Df a server ^Hcation that implements 

™enL a databaw with dbact access to the data can implement the 

FIG. 7 A is a flow diagram of the communication path for S?^2^^ ^ * *° pffotect the 

acccsaog a class factory object that is implemented in a St iCBUcious or ill-behaved client code, the 

server DLL to be executed on a remote node ^ ^ adeemed in a surrogate process. 

no. 7B is a flow diagram of the steps executed by server '° ^ty to exectite a server DLL in a 

code executing locally k an indepenXnt tco^ '"^^^ F«=ess aDows server code that is implemented 

FIR ft M Ai.Lr^ Z TT T . accxtfding to a difltatnt architecture model than the dient 

invoking server code. example, a sarvcrUlL may be implemented acceding to a 

racj.sns a flow diagram of stq>s executed by a suTK^atc is <^crent tiircading model than the client program. (A thtead- 

prc^ram when it is launched as a surrogate fffocess. ing model refers to fee synchronization of ^^simultaneous** 

FIG. 10 is a flow diagram of the communication path for execution paths wigEin a process.) Running the server DLL 

accessing an existing object of a sharable dass that is ^ different Reading model in a separate process 

implemented in a server DLL to be executed on a remote prevents Interferenca with thread synchronization in the 

20 client process. Alpov a server DLL may be inqdemented 

FIG. 11 is aflow diagram of the communication path for ^^xoiding to a dlff^t machine instnicdon set than the 

instantiating a new object of a sharable dass that is imide- ^^^^ program. Far example, the client ittogram may be 

mented in a server DLL to be executed on a remote node. written f<ff the Intel 8^x86 architecture while the server DLL 

FIG. llisaflowdiagramof thecommunicationpathfor ^.J^^Jjf*^"^^ 
custom mmiarshallinT^g a surrogate process ^ ^3 ardutectuit. Smoe Dll^ wntten for one architecture typi- 

» B«5iiavgaic process. ^^^^ ^^^^ ^ ^ process executing another 

DETAILED DESOOPriON OFTHE architecture, a surrogate process which loads the server DLL 

INVENTION can be run on a diflfeacnt oomputex thai conesponds to the 

Pmtwiw..*. *K * i ^ instruction set of the server DLL (DEC AMia) whUe the 

andsystemsforexccutmgseivacodeinasu^ tion ardiitecture, AHeraatdTa sunogatc croccss wh^ 

oojccis nas saver code (dass code) that intp lem oits the AljAa) can load the server DLL on flie same oomouter b& tiie 

e^JTIm . that can be instantiated clientprogtani In bott cases, the smrogate thus^JovidesSe 
Sifi^f^«^^*l*J^.'^.f coneqwnding class „ cUent program wi* tansparent aecwfto the sSva 

SSSLSf^i^ "^"1^ 5* FIG. 3 is an ov««ew Mock diagram iltastnKing obfe 

^«he,erver»deu,heIpimplSSe"a,:'SS ^XLl^Z'Ts^Z^^l^i 

A <nZ^. ■ . , , to injjtonent objects <tf 
A smrogate process is an indq)caidently executable pro- so sharable classes. For example, the pathname of Ihe 

gram that can be used to execute a server DUL In an able module for die twver code for a sharable dass of 

ttcoitKBi context (e^g., address space) that is squtate fiom objects may be stored in the registration database 303. 

fteweomoD comot of the requesting dieat program, lb Refening to HG. 9, when the dieot program 301 wishes 

raeorte a server DLL, the smrogate process is lamiched and to access m obiea S a shaiaMe^ &fX«^™™S 
ft^roquested to lojjdfte saver DU^TTius. the use « 3«1 «qu«ts flSt^^^ol ^?^t 

S •"'^ ■ "^"^ P"*™" »«n,»lodeforthec«ieq»ndinJ3b^p^^^ 

T^J"^. ^ contn,! managa3(S&teLnes*^lher^2^ 

^^S^S^^ ^ *^^J" " object^ented base 303 whether the saver code is availahl^ the foZrf 

mvironment niiere many objects are shared among many a server executable « a server DLL KAe ^ 

^Z, Zt.^ *° ' MiM«te process is paramount Hie agcr 302 laundies «e server executable directly. IfSe 

f^ty to execute a serv«x DLL in a surrogate process is saver code is avaaalde as a server DLL. ^vte conwJ 

^ t.'^ d«ires toinvote a saver manager 302 can either (1) r«^tteSoStoe^ 

^^t^t^ *^ DLL(e.g.,thepathnai»Uihcclientpro^5rtoX^ 

7'^^ '^^^f ^ *e I«Bramloafl the server DL^to own «^ 

addtoon. ttc ability to execute a saver DLLin a smrogate tion context, or (2) humcfa the smrogate proiMinSM if^ 

process allows serva code available solely in DLL fonn to already launched iSw-t ^Z^^^^^^ 
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load the server DLL in order to isolate the server DLL from the dedsioa t| Whet^jD use a partioilar surro^ process 

STclicaiM^^ 301 execution context toloadapaiticiilar «*VW DLL may depend on the sim^ 

When smer code is available as a server DLL, multq)le of the seoirttjr identity Of the client program reqi^stmg the 

schemes can be used to detcrmioe wh^ the server DLL server DLL (6 the swtiriiy identmes of ttie other cUent 

should be run in tiie client program execution context or in 5 programs using scrvflf . DLLs already loaded witiiiD the 

a SOTaiate surrogate process. One scheme allows the client parUcular surrogate pwccss. A security identity is used by 

program, when it requests the service control manage to the computer system to ensure that only certain code can 

execute the server code for a particular (^ject or a new access data, code, Ottd system resources that require a 

object, to specify that if die server code is a server DLL, then defined levd Of aumflri2ation before access is permitted If 
the server DIX should be run in a surrogate process. In an jo the code to be executed has a security identity with the 

alternative scheme, service control manager maintains a proper authorization specified, then access to jKotectcd data, 

database containing infcamation that indicates which server code, and resources is permitted 

DLLs have **tnisted" code and which have **untrusted" code Asecinity Identity b typically operating system 6cpen- 

or code with unknown security attributes. This information ^^^^ exaii^>le, a security identity can be viewed as a 
could be stored for exanq>le, in the registration database. 

15 user account {user end a password. There arc mMiy ways 

Accoixling to this scheme, when ttie service conticl manager ^g impit^mmit the spcdBcation of a security identity. In «ie 

is requested to execute a server DLL that contains trusted embodiment, the servef code spcd&es user IDs in a persis- 

oode, then the service conttol manager rrtoms (he server registry and oaaesponding passwords in a secured 

DLL location to the dient program and tiie diait program database. Wtefi a system service or client propam executes 
loads the DLL into its own execution context Alternatively, jo server code, it can use the inf conation in the persistent 

when the server DLL contains untnisted or unknown code, registiy and Secured <latabase to execute Ifae senrer code 

the service control manager causes tbt server DLL to be ^j^^j^ seonrity ideality of the requesting dient program, 

loaded hi die execution context of a surrogate process. Yet, a ptefteed enflwHment, die methods and systems of 

as another alternative, the server DUL specifies, e.g., inme (jigjjjgggntJijyeQtioBBJcin^jlemcntedonacoBiputasystem 

registration database, that it always should be run in a js j^—d^j^g , processing unit, a display, a niemory, 

sunogate process r^ardless of client program q>eafled ^ imot/oUtout devices. The prcfored embodiment is 

desiies. One sUUed in the art wfll recognize ttiat oOiff dejigaed to opente to an object-oriented environment, such 

schemes exist for detamining when a server Wi should be gj „ cavfromnent tlBt siqipats the Microsoft OLE ZO 

executed in a smrogate process (e.g., all 1*1^ ("OLE") protocol estilblished by Microsoft Coiparatian in 
execute in a sunogate process) and that combinations of 30 Redmond, Wash. One sUlled in die ait will also recognize 

fliesc sduanes are possible. embodiments of 6te present invention can be practioed 

Once a service ooniiol manager detennines that a sender ^ non-object-ociented envnonment as weU. 

rax needs to be executed in a surrogate ittocess, the service 4 is a Mock <Bagram of a general purpose con^wter 

oonlrol manager accesses die appropriate surrogate proQMS ft^nracticinfl a prefened embodiment of Oie present 

or launches a new surrogate process. Tlic setvioc contrrt 35 j^^^j^,^ con^mer system 401 contains a central 

mana^ requests the surrogate process to load *f jav« processing unit (C3P0) 1«2. a diqday 103. input/ou^ 

MX and to create instances of the dass factory olgecto for ^^^^^^^^ ^ . oan^uter memory (memcHy) 405. The 

ttK sbarable classes sv^ipwted by the server DLL. A rnss ^ process, as wdl as oflier executing programs, 

fiuxoty object is an <Aje«i (hat can teosedtoore^^ ptetobly reside ia C»e memay and exeaite on the CPU 
of the dass corresponding to a particatarCLSID.TMS, tor « ^^^j. The surrogate (fflBcess 406 U shown after loading serrer 

eadi sharaUe dass of objects, there oists a dass factt^ DLL code dW^TheSBviceoonliol manager (SCM) 408 also 

object (hat can be used to instantiate obiects of that dass. In ^jgjj„^c<aj,a^Bianoty405,a8wdlastheex«cut- 

reqpoeseto die service control manager requ^ the smro- 41©. one skilled in die art wiU realize that 

gate process loads die requested server DLL, creaes ^„ese£t iaventhfflcan be inylemented in a distiibuted 
inaances of die requested dass factory objects, registes the 43 g„^mngj,,j,jerenicaedian one ctanputer system is used 

dass factory objecu in a legbw^on to oommnnlcate wltfk odier computer systems. 

od«oode«Bdproces«s,ma^ M^a^ aspect <rf to invention, a preferred embodiment 

w^a^sov^isbdng^xessedinasmrogate "^^^^^^..^^^^^ 

'^l,diments of die present invention enable multiple ^^^.f'^^^T^^^^^^^^t'^ 

ser/a DLLs to be loaded into a single surrogate process, as serva DlL. In 4b oanqile, die server mjl 

^ as adn«te server DIX to^loaded per surrogate « word-processing capaWlitws and implematt tiwes^ 

iSri«^^^f«^canbeWf«^f« classes: a paragraph, n sentence, and a word dass. T^edicnt 

^S^toexecuteaparticularserveiDLX This decision instance of a paiaffaph object Mler die serve KL^^ 

^^ST^b^^Stenented by any well-known loaded by die sunogate process 501, die surroprte ^ocess 

Sd fTitoentinsTSc, su<A as an array data 6S 501 invokes server DLL code to instantiate a class fertory 

^SJ<^?<^^Sri5.W2inge»viromnentUere obje« for 

security Xtities areTedte running programs, DLL Thus, in RO. S. dass factory objects 503. 504, and 
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5«5 aie imtantuted for the paragraph, seotence and ward coinmuaieateusllAjbessage passing tedinioues that involve 

instantiated, the surrogate process 501 registers them in d»e Ai<n i„ m.. ""•s^""- 

registration database 5^ As shown, the regisiwdM S^! e^l^'J?! ^ I" art wiU recognize that altenutive 

base 502 contains entries referencing the initiated cL«s < (instantiating) objects of 

factory objccu 503, 504, and 505 in toe surrogate^ ' ^ ^f^bo^^t, the 

501. At this point, the smrogate process 501 am return a T2f^^°7 "^l??^* '^^'^ equivalent 

referencetooneofthedassfactoryobjectsorcaninstantiate Y*?*«^*«'<=e niethod) is implemented by 

one of the sharable classes and load in existing data (to shaifcblc elm Each server defines a flinction that 

access an existing object) or initialize flie instantiated object futures as initialing object for a requested sharable class 

as a new object. Because in fliis example the client apph- " returainS a separate class factwy object. The 

cation has requested a new instance of a paragraph object, ^f"' pf^ram then can use that object to create other 

the surrogate process 501 uses the instantiated dass factory "'J"** <>' "aWO dass. Thus, according to diis scheme, 

object 503 for the paragr^ class to instantiate a new ^ '^i^ acts as Ss own "dass factory." 

paFBgrq>h object 506. The surrogate process 501 flien "'^ " SutrogaSs Process in a Netwwk Environment 
returns to (he requesting client program a reference to fee " ^ mentioned, a ranrogate process can be used to execute 

instantiated paragraph object 506. * saver DLL on 4 remote coii^>uter system in a networL 

In aprcfctred embodiment, in order to instantiate objects PJ?- ^. 1* «^ ovewiew Mock diagram illustrating object 

<rf a abaraUc dass, tiie cone^nding class factow object "ff"^ a^nogate process in a network environ- 

in^rfements an IC3assFactory intoface whldi contalnsa ^ '°*^J'* ^ accesses an object of a sharable 

method for creating an otject of the carespomHng sharable *™^a (WW DLL that is laulediito 

dass. This med>od is referred to as the Qeatelnstance *^ ""^ <^'" ^ 

method. When invoked, the Cteatelnstance method creates """^ Ut*"'. P""*™™ « «H">« *Bvice control 

an object of the shaiaUe dass (identified by a CLSID) by ^"^^vt !f * "^^t^" database 603. The server 

allocating the appropriate data structure storage and vitud "'J^' ^ «^ 

function tables for the supported interfaces " "gistratioii database 607, and a starogatc process 60S that 

Spedflcally, eadi server is responsible for providing a '^'^ ^. ^y"^ 

dassfactnry object that implemeotelhe lOassFw inter- K«^^'^*°*,5^i?^' files and loca- 

face for oLh SableTss of objeculST^sS^ j!? ^Z'^TT:^ ne^ork address of sped- 
implements. Thus, a word-processing server thitf suppate 30 ^^^^^Zt "f?^ ««*«s of a named node, 

pamgraph. sentence, and w^ ol^^ (carrespooSfo Slw^ ^^TIT P"^*^ ^ » 

example, to sharable dasses identified ^T^ni ^ ^ J^^ ^^^^^ sMUed in the art 

PARAGRAPH, CLSn>_SENTENCE and CLSID~ «f>8nize that there are other ways to provide sudi 

W0RD)proWd;,threedairfi«to?3biSsZiS^ '"^^Z^i: 

dieiaassFactoryinterfeuxsforapaia^oW^TsH^ „ „hS^^?f!?^ ' ""^ 
tence object, anda word object,rJS^y.^a«S " IS^J^T^J^^'"!^'''^^'^'*^ 

prog.«ihasaccesstothedi7fiu^^ecicarrc»oS ^<**^f^8«i«jinnob,ect,ihcdientp«,gnun601 sends 

to a particular sharable dass^SKy^^S Z^^l^ ^^^I-j^f "^f^ "«»»8« 

OSID), the dientpcognun cait then instantii^ ai^namba t^iJ^^ " objert conesponding 10 a particular 
of o^ects of that dass. Preferably, « S^^I^.^.TT^"'''^''^!''^"""'^ 

instantiates a dass fact«y djject for eadi the sh^ " f stpanite procew laundied on the dient 

dassesitsu)p<rtsandre^'thesedassfiuW^^^ ^wh«ew it, s«8VKes «e needed. Note that wh^ 

enable dient programs toawess them. "^""J**"" saviceconlwlmaBagfr is viewed as a dient service control 

pladng references to them in thT^stSi,^^ ^vCSl^^,^ ^ ^L? 

Later, when a dientprogramwishes^^tira wort ^^^^^,^J^T!f^'T^^rZ^*^^'^ 

object, the dient pro^W«ies the sovlce «Ll fte^^STJSS^T"" ^ '° 

agerforahandletotheiej^Ltered worddass&ctc^oSS^^ ^y^o^l^^^J^^J^t^^TT^ '° 

rate process, then the dient program queries (he service to datd well-known RFC medmmsim ta thTtU^Ti^ 

oontiol managa for the handle to the d,ject through wdl- control J^^'^'S^^ ^^ n^. 

taown interprocess o»nmmnication medianisms. For respoodmg to the solvation T^Oft^^^Z^ 

^l^'^'^t^^^r^ ' co^l«»--8cr«2<bterminSt£S^Se^ 

S^T^S^SS^. * ^"-^^ '^T ^ •«=*^' *«' ^ *«vi«» contrd manager 

ager. Tlie underijnng system Oat implements the RPC 6S 602 communicates diftctlv nsinn local RPC medun^. 

2riS.SS^^."l*:^'S>^-f"*P"*^ with.saverexecwSE2U:?s£Sa^SK 

until the function caUretums. Altcraahvdy, iheprooess may loaded the server DLL as dcsaibcd wWi r.^oe to m 
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S ) In its comnuinlcadoa, the dicnt service conliol manager reside on ^i>^f^-^ "^'"^ JT^'f 

duZ^ an of the Monnation in the activation request FIG. 6, toe dlwt pr^ 701 ^^^^f'^^J^J^I^' 

to4e^erseivice«mtrolmanagei606.TTieserveiKrvice fac«ory object torn <&*iient service contolinanag« 7*7, 

S?t^S4^ *cn c3 the registration database and the cUeqt service control manager 707 forwards *e 

^^LTS,tiltD?S m) to find^hc ftopn server 3 request to the jKoper SBver service conlrol manager 716, 

SL^SleTs^ DLTirri^sary.the ^service after detenmnli«vdtfa*Uch server service control mana«^ 

"SWg^ Indies the suiWate Process 605. to communiate. The ea^ senoce "fj^," J" 

wwSlSheserverDIX.lhe surrogate process 605 then theninvokes the Mrvarcode «»«P»'^8>^^*"S"«i^ 

wtateva tasks are necessafto activate the class class factory object, ttt server semce control «»oagcr 716 

KHbS 0^ a nw or adsting object of the requested to invokes the server cod^as an independent process (a server 

SSe dS ^LaSfte surrogate pi^s 605 marshals a executable) et laancte the sunogate prognun (invokes a 

torreSSy^^ip^ and sends the surrogate ptocess)an4tcquestsftesunogate process to load 

S oZ^tp^J^m throu?. the server service the server DLL. In tjts case where a 

Si mSaga 6«6ai^the client sa^ce control manager invoked, the Server sawoe control manager 716 <tocimines 

Sri^torStWm 601 receives the packet, it is whether it «> tuje aa^ting sarn^pj^s or 

aTe pointH^is then able to access the it needs to lamich a nW?. one. Once Ae server DLL has been 

^^Tk- ^ loaded intothesurrogae process, the surrogate process 723 

'■'SaEand unmarshalling are mechanisms f<r pass- creates a dass fectosobject for the p*««sted dass Md 

JSS. Se^^^^ajocesses. TTiey are defined returns ^^^^^^^^'^'^^^^'iS.'^' 

h^cS^^ U S Pat No 5 JllTw entitled "AMEIHOD 20 two service control acmagcts to the dieirt prognun 701. 

XlSlSf pS fSojIk MARSHALLING OF The *ove dcscripdon assumes *«J^^^^ 

n^rEWJACBTOI^^ serviceooBlnttmaBapresidcsonaiemotBservernodcJ^ 

SS-^^TWelS^^Laporatcd by refoence. on the other ^''_!!'<^J^'^^'^J^ 

"SHrSSh^r? s:n2d?«^»;B^b?;,"^ 

^'J^ in its own «gf 2f^£!SL m£ « "^T^'^S^^S^ S^T^ 
rrSrS^^Sn^S.S.S'SS^nXo " S'Se^^howtoe:t«-ethesf«eodcand 

theproxyjmdthestuboJ^andcom-rtsthcmfarftttare ^ ^^jf^^'^'I'Xha IhVdient program 701 
n^f|Log,tcPro»..oA«essaClassFa«ory ^-^ ^^^^^ 

**Fra 7Ais.llowdiagramofthecommunicatlonp.lhfcr program has not reqOKted l«ultag server DU^ in^^ 

^^Vd^to:te^Wectisusedbyadientprogn^ «;rver information tosot availabte locally m&cregistrabon 
eadier. a class tasSerfOoyM ^J^ Jf ' r~iriM^actaiv database, the dfcnt SBvice cwitrol manager 707 may not be 
createano^ertafash«-bkcla«^^^ SH^^^Ue Wteflicr the serve, code is available only 

^ "S^i^l^^J^^^t^^ jS^Sio^CSonStartObjectServeDlnyrtother 
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code m a siurogate process. TlKSc nilcs may ovaridc the StaitObjettServef^^ecks the output parameter ppacket to 

dieni program preference. Such alternative embodiments determine wheihtf a»e function InvoteSavex has^^ a 

^jd«h«s^ co^le with the logic discussed wi± mai^alled InterfS^ corresponding to the requests' 

reorenoe to PIG. 7A. fattoy oHject. If ga, the function continues in step W2 to 

When a senrff executable .s avaJable or when a server 3 send this marshaflW interface back to the clicnt^o«am 

DLListobeloadedinasurrogate process, thenin step 710, else continues in Stm> 720. In step 720. the flinctionSr! 

tObjectServerscndsTrequestusS.looa^^^ 
node location. In one embodunem, the desired location is to the launchc4 luirogate program 723 (Twr^ 
tos^upon infomahon contained in the persistent registry executable) to invOke the RemCoASlvateaass toicO^ 
re^rding where the senrex code desires that it be executed, lo One of the tasks pafotmed by the surrogate ptoSs or 
^« "^l' " diem requested server executable) ^n it is launched is^tiaK oim 

location, nus example embodmient is discussed in detail in underlying system <«.jert support As part of this Zotss 

entitled Method and System for Executing Code (preferably as aBLL) into the execution contot rf^ 

S^^'L*S?J'„'^''?''°^'I'1""^ '' " ^<'8at.Jrocess«iare,eren<^to^;:in~^S! 

step 7U, the function determines whether the determined ing to these systerteqppUed functions are registe^^fte 

server node is the same as the local node (where the dient underlying KPC tt^. In this mamL SS^SS 

program 701 is exeoiting) and, if so, cootinues at step 712. functions for ctcatfcg Ejects of a sha^TS 

else continues at step 713. In step 7U, the function executes factor objects can exposed via tteHPC fS to oO^ 

n*"-^ through 719 to st«t up the 20 pro^es.Ve RmCoZvJSZ SSt ITl 

^f^-^^J!" .separatcprooessmstead of remotely. system supplied i^on that is exposed in this mamier 

utom^ly issues a local RFC Accordingly, the s«|^ service co.^manager716 knows 

le^ to the smer oDdeexeamng locally to request the how to send the l<kajl«<: request to thTcoLtrooS^^ 

SJ^^^!?*^*^'* thesuiiogatepioce8»723in7tepT20. 

J^V^ 7 executed by server 25 Upon receipt ttf RemCoActivatcaass request; the 

wde ««^g locally m an ind*pend«jtj«ooess. These surrogate process m invokes the undedying ^Ln^s^! 

^tH^^ suvs 724-727 discussed pUed function RemCoActivateClass, w^ acatcsZ 

farther below. Howeva, the server code executing locally instance ofthedassfeuicry object if it does not already exS 

1^^^'^''^%^^^^'^'^'^^'^ andretumsamarshalledversi^of Its lOassFa^iS 
control manager 707 instead of sending a response to the 30 face to the server service control manager 716. 

n i^J l . . whether a dass factory object already has been aealed and, 

H. instead^ toe detaimned server node is a remote node, if so, continues in filep 726. else continues in step 725 

SS,^^^*;^^*'"' SMds a request to invoke the Assuming that this code is being executed within toe sur- 

StartObjectServo- fanctton on the detenmned server node 35 rogaie process 723, la the n«x^ case, the dass factory 

^nga rrawte RFC n»dianlsm. m this step, the fun<tion objects have been als8«ty instantiated v^hen the sutZS 

^^^^^^^^''^^^^P'^^^^^to^ program waslaundieaandloaded the server DLLHot^ 

approptuite server sm^xco^ this function is potcmially executed in diff,«nt 

J^Tfi.^!^'^ ^ StartObjeet- hence, steps 72*-72S«dfl for g«,eral purposes. In^TO 

^^^^ '^Z'^J^I'^j;^''^'^'^ ttefiinctionjnstanltateacUissflulcqr^canJJ^^ 

^.^^^L^^'^'^^'^^^''^^^^''^ «otherequeatedshardfleclass(tSxl«^ntakM^K^ 

^^Z^^IJ^^'^^^"'^^^^'^^^- l««^«CLSro). to step 7^ the function marshakSe 

mtaes tf the requeued sewer code is only available In the IdassFactory inteatse of the instantiated dass factory 

^.'l"' ^'^'^ "^T^ « object into a packet lii Step 727. the fundion R^kS 

amogate ^ been requested. (RecaU from the 43 vateCUss reoims this pacta* to the server Jr^to^\ 

discussion of step 708 that in certain cases this detennina- manager 7W through ttel^ FTC im^iS^ 

?L*^ni^,'^r.**^"'*'^if**'-^"'^ TLn,fl.c3»StS,j^<SS^^byttc 
a sSL^^^SS^. f ^"^.1' server DLi and die use of server service control manager 716, recdws the Z^ted 
a smrogate process has not been requested, then the serva iaissFartoryinte»f)««ii^721, andin8teD7^favMuds 

^Do'^rr,?'".*^"*?*"'*^*"'^** » thepacSTithedieotser^ciSiSgJmS 

^^"^ SlartO^ecttever executed by^Tdlent s<^ 
wffl rrtutn *e server DLL loojtion to the dient prog^n control manager 7<^ receives fteiaSLSS^aS 
^^IJ^^^j^r^^^^^'^^^^'^^i^^^ »tep 714 (efther from the remote service contrd^gS 
To^^l^^ ^T^^^.^!"^ '""^ ^" or fiom tocal «w«r code). In step 715. the fundto^ 
M^SS^^^i^rT'Jf *? ^^t'^ " StartObjcct&rver Ibes forwards the p^ ^ntaining die 

calls the fundion livokeSeiver to determine marshalled lOassFactotyintofaa to£edieDtpiog«i;701 
S^hi^^f^ ^^ft^if^'^ code as a serva through the local RMiidianism. When the ch^>^ 
Sf?^„?T^v«f^^^'**!^'i""™8ateprocess. 701 recdvcs this packet in step 704 of the fan^ 
nie ftanctionlnvokeServer laundies the server code when CoCietaassObjed, SmmarshalTtfie padtd Into ammv 
nec«saor and returns a handle to the server code as a «a d,ject on the S B»de in st« TOs!^ Zcy E 

Wn^^ ^^^'T^ ^ addition.if thefundion dass and, during «> mnnarslilling mdhod call, 

l«i«ised, teen the marshaUedinterfaceof sameKlassFactoiy lnlErf«*onth; servan^Sp7w! 
S^^^f^ " CoGctCanssObject sets the retam 
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1. Determining and Launching the Proper Surrogate Process 
FIG. 8 is a flow diagram of the function InvokeScrver for 
invoking server code. This function is called by the server 
service control manager 716 (in FIG. 7A) to invoke the 
proper executable code, loading a server DLL if necessary, 
and to return a handle to die invoked server code. Once the 
handle to &c invoked server code is recdved, the server 
service control manager 716 uses this handle to request the 
server executable or the appropriate surrogate process with 
flac server DLL loaded to create and return a marshalled 
instance of the lOassFactory interface of the dass factciy 
object coaresponding to the requested sharable dass. 

The function has one input parameter and two output 
parameters. Input parameter rdsid contains a client program 
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ou^ut paraiaeter conflttbing the server process handle to the 
RPC handle of the ciSling class factory object and srts the 
output parameter coOB^nding to a marshalled packet to 
the registered marstafflcd IGassFactory interface of the 
5 existing dass factofy object, and returns. (The fUnoion 
InvokeScrvw assumi^ that if there is a dass factory object 
rcgistffcd, then the iCfessFaaory interface of this instance 
is directly accessible itl marshalled form.) 
The RPC handle i«ltimed is dependent on the underlying 
10 system; spccdfically llto communications transport used. For 
exan^le, it may be a process identifier and a function to call, 
or a port, or any otl^ well-known medianism to access a 
functiOT of the laurated process, Tliis RPC handle to the 
dass factory object pro^ddes direct access to the object from 
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Ou^t parameter pscrvcr contains a handle to the invoked 
process to enable the requesting program to communicate 
via RPC widi tiie invoked server code. Ou^ parameter 
ppacket is a pointer to a marshalled interface instance. 

The function InvokeServcr determines how to execute the 20 
server code based upon information in the persistent registry 
in combination with information regarding the security 
attributes of the requesting client program and the server 
DLL corresponding to the requested dass. Although any 
combination of these attributes is possible, in one 25 
embodiinent, the function attempts to use an alrca^ exeoit- 
ing sCTVcr executable or an already executing sucrogatc 
process if the security identity of the requesting dient 
program is the same as the exeoiting server executable or 



this RPC handle to «t> class factory object, it can invoke 
methods of the object (e.g., Createlnstance) wifliout being 
aware that the dass factory object is instantiated in a 
surrogate process. 

In step 8C4, when a new process is to be launched, the 
function InvokeServirlodcs up in the persistent registry the 
locati<»i information Of the server code to be executed. In 
one embodiment, tills information is a specific pathname 
pointing to a server D^L or a server executable. In sup 805, 
the function dctcrmince whether there is a server executable 
and, if so, continues hx step 806, else continues in step 807. 
In step 8#6, the function laundies tiie server executable and 
sets the output parameter containing a server process handle 
to tiie RPC handle of tfie launched server executable, and 



Ae snnomteOTOCCSS. One skiUed in tiie art wouW recognize 30 returns. ^ . . . v..^ 

JirS^SSes of U« ^questing dlcnt program la steps 
canbedBtennlMdbywcnbiDwnmKiuuii^ gate ptoass to use to Joad the saver Dl^ 

SSitoiTSTpli^ta « through . taWe look-up '^f^^^'^^ .'^^ .^^ 
^S^iaTadlZtodetenniiring whether the security the ftuK*.on ^''^ V^'tLS«^^X,'«^el^ 
identily of the dient program is the same, if a new serva 33 already aecrtmg mfl, if so. ^^J^^^^L^ 
Dllk to be loadJ^to ail already executing suiKigate continues in step 811, In step W. the function djtommes 
™^ tte^ttveTDll^bc co«Zfflile fi^ a wh«*« it can reus* llfls already executing surrogate process 
S'SS^d^^^S-sTaDlZ^K-dedin ^'f^-^^JT"^^.::^^^^- 
JteMBTOWteTocess. One way to dctamine whetha- two requested class is cangwoihlc with the sm^rDL^^ 
^^ujrS^eisto,«mdesuchinf«mation « 
in a ooinpaiihiUty matrix iinplcinented within the posistent «=«»P»'*"'2*?°?^ 
rei^^n^vely,eadi2a^U.caBpiovideaDetili^ "W*^ ^!f*^M^'^"!?„^ 

^Kfor querying whetha the 8«v« DLL pwfto to be is oon^atflilc. %^fVs2^B^^»ri^^^ 

toKm surroaatc orocess. One skilled in the art continues in step «U. In step WW, the fdncton saOs a 
for detamining DLL « request using the local RPC mcd-nism to *e cnstog 
)Z.!^S«rDLMe]ha^e case, one sewer DLL surrogate process to toad the appropnatcsava DLL. In stq> 
fT^^f^^^^^irt^S 810 jtoe fcnrtion sets the output parameter containing a 

'^X^'^cT^KS^funcdonlnvokeScrver ^ t."^^,^' £ 

fir^^SSSSes whethextherequested class fiictcry object is surrogate irocess, and f^^^^^l^^ 

SLtiated and registered^ looking up the requested so ^^^^'^ '^Z,"'^^^^^^^^^^^^ 
S>inthe.egistEttble.lfthedassfsctoryobjectis 

fomd; the ftmcton attempts to reuse the registered sav«r sharable classes taP«f?J^tV*e ""J^J^j^?™ 

o^taUe or surrogate irocess if the requesting dient factory objects are tobe mstantfatedai^^^^ 

^^S^tJ^r^Sf ^same as the i!lre«ly execut. new surrogate process has been laund^d. m »t^«.J»f 

^^^^^^^OAeStte toictlon InvoteSavtt laundtes ss function sets the output parameter oontaioing a saver pio- 

^.^^c^^dTJSS^^^S^^'OU. cess handle to the RJC handle of the l>«vly taandjed 

L^SS«S«s^ogatep.t«ssorinanew surrogate process, and returns^ As ^^'^^'^^ 
mcimaanan?eaoycaiecuuiiB»u" tf^v renimed RPC handle is system dtjiendent and allows direct 

''^ffii''s««pMl,thefun«donInvokeS«vadeta- ^^'^^'^'^J'^'^'^t^T^J^^^ 
„£1S ada^s fa^ object correi^nding to the 60 obj^ without the dient p«gramb^a«^^ 
O^inputparamctaisinsta^^-lre^If^ '^-^^^^^^S'^^ 

^L^id^WoftheLpiestingdientprognmiis the same service control managa to the huindied smiogate pr««« 
^T^iS ideiSJTS^ cJ^as the regis- 65 because, in a preSorcd embodiiMnt. ^"'f*^ 
^^^^Sl if so. cS in step m numaga r^J^^jf whidi dass ^^^^^ 
Sf c^u«toLp 804. In stq. M3. the function sets the In^lemeaUd by wbicb sova DLU. Atenativdy, ead. 
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server DLL can pnmde an cn&y point to instantiate and results ia.the in^on of an □ndetiying system provided 

ae^ an of the supported class factory objects, but then the function, e.g..CoQetPersistentInslanc?TheaZn'3SD 

^cccontrolinanagerrnay not easily be able to cache this path shofrn in FIO. 10 is fundamentally the same as the 

JSSef«e°L!S m the art wiU recognize that otha communication path desoibed with ref«ience to HO. 7A. 

altwnanves are possible. 5 except that differnit functions are invoked and thus the 

^^^^ T ^r**^** ^""^"^ P«>8«« "22 P«f«ms slightly mS<5 iLk 

nr^Jl^n°^!^^^'^' " ^ '^'^ suirogatepn,gta^022 retuSs Lw^^Tto 

S^f^ M L " ? P'**"'^- "^^ " '>^^ «l«hig object instead of return- 

program has two mput parameters (which are sometimes ing the lOassFaCtey interface of an instantiated ctos 

refenred to as command Ime parameters because they are lo factory object 

^ed in the command to launch the surrogate program). Specifically, the'lbUowing stas differ from PIG 7A. In 

Dlioame contdns Uie location inf«mation for step 1002, the cli^ progrTJwf^Tinv^J; 5 

^^Z?^Av^ ^ "^^ ^'^'^ SvcA«ttvateObject in the dient sexvice control 

^^^/Hf^ contains a hs of CLSias corresponding manager 1007. Thoflmction SvcActivateObjcct cxecotedby 

tofteda^sfactoiyobjectstobemstanti^andrcgistered. u the diem sexvice «».rol manager lOWpctfonnsi^S 

Wticn ae surrogate pr^ is launched, the surrogate steps to ihc function StaitObjeServ* However, the foT 

pro^ caUs a system initialization routine to initialise the tion SvcActivateOmect executed by the server s^cc c^- 

undctlyiiig object suppc^ loads the requested DLL, and trol manager I016|!etfcrms slightly difierent tasks than the 

f^on»artObje^<x.AsTp,^limi^\Sr«hc^^^ 
The program thenenters a wait loop until it receives a 20 tion SvcActivateObj«t executed on the servexnU. deter- 
ftoaer event to perform another task, for exampie, to load mines in step 1017 whether or not the requested eriX 
a^ DU. and instantiate andrcgister another set of class object instance is «6cady availabfc on thTseiver nodTto 
^^fi^nT'- . .w ^ embodiment, tho function makes this detsminadon by 

Specfflcally, m slqi 901 the program calls the underlying looking at a running object table, which contains lefcreacei 
sj^ftncticmOleMtiatotoloadthe^^ ^ tom^fa^c^^aJ^^^Z^^^^J^^n 

sopportfun^ons (typically provided in the form of a Dli) the server riaciine. lPiheftLio«<S^ZteS^ 
and to registo die entry pomts oftiiese underlying system is instantiated and that the security identity of the ch^^ 
^JV^-l^r'^^^J!^ fadlity. As mentioned program is the same (cr compatiLtelffi 1 

tfus mibahzation lunaion concepmally loads the identity of the process dm halinstantiated the runn^ 
^^;'f^<^'^^<^y^^P^^(in 30 object, ttien ti« ftu«aion skips tf« stejSTinTolSnf 
this case the surrogate process) and registers pointers todie server code and c<mtinues at step 1020. Otherwise ti^e 

J?^r*''^ mechanism, these entry point, m the location o* ti,» serva DLL or to invoke the tonStoS 

S^r^^™?^ requests In step 9W, the progr«n InvokeServer as deseSbed with reference to FIO. 7y^S^ 

loads tiie ««f «DLLwtr^ndmg to the input parameter 33 1020, the faction liivokes a different entry point in *i 

DLLname. In steps JN»-906, flie program instantiates and und.Tlylng system stjppUed code loaded in samwate process 

registers a dass factory obje<* for each of tfieCLSIDs in flie 1023, RemCoActivBteObiect. to activate ttl^ean^^ 

input parameter rclsidlist-m step 903. the program gets the object i^stan*!^^ ^ 

^^i^^'^^i^^SST"'^'^*'^'^^ In «n alternate enftodlment, if the Itanning Object TVAle 

'Ji tests to see « contains interface pointer and if flie requesid^a* 

Mliaherithasreachcdacendoflhel^ available in the ta^thcn tiu: server Svice cont^n^ 

program calls a predetemuned entry point in the loaded sunogate process MB3. Instead, tfie server scrv^control 

^^^ni^^ in tt« 43 to die requestedlfflBrfaie, which is obtainedfeTT 

WbcrosoftOIS 2.0 cnvtroninent, tills enliypoim is DLLGel- Running Object "RbBB. 

^^'^T'T^^^'f^J^^'^f^'''^''^^ TlcfiiiictionRcmCoActivateOblecttaiplementedbythe 

matotomstantutetiico(Hectdassfi«Joiyobject.Instep underlying systm p<3fatms similar tasto^ the Rem^j^ 

9W flieprDgramrepaters the dnss f«*ay objectretumed tivateOa^ fanctioidiscusscd witii^^a tfS 

hL^ JT^ '*^t'^ continue in stq, 903 at the so except ttuit ft retana an RFC handle to tiic leque^ 

bet^ining of the loqp. In one embodmient. step of interftce of an otistiflg object instance instead of flielClass. 

repstmng caDs a function provided by die mufalying Factory Int«f«« fSl cliafacto^^S^ 

^^'Sf^'f Ti*^^*"'?i!^°"»^'*l'° »t^M24.ifti,eobJ«tisalreaSM£^^^ 
rcgista tiie class factory objea wtth the service control (which implies its Iwanoe data has already bccntoS 

t?!Sir^*^K** same node as tiie sucrogate as tiientt^ function cottBnues at step 1028. elsi it continues*; 

until stepl025.Instepl02S.ttiefunctiondet.rmine8whettieraie 
tettex action is requested. class factory object b already instantiated and resisted 

m^loST^JL''J:"'fr''^-^^ "<«'tf''o.contilnres In step 1027, cue oontinuL^^ 

FIG. W is a flow diagram of the communication patii for 102«. In step 102«, tltc function instantiates a class faetc^ 
accessing an existing object of a sharable dass tiiat is 60 objea corresponding to the dass of die requested obi^ud 
mopkmemed in a server DLL to be executed on a remote obtains its lOwsFala^ interface. In st^l^T^^^ 
no^ TWs communication path is ^^pfcally encountered creates an lnst««*lfthe requested o^e^ usin^ fl.e^° 
^n a dient pro^ attempU to bmd to (activate and Factory interface of flie daL factooTUjecTaid loads^ 

^ ^« " ^^^^"^ ""j"* data from tfie pZLne or storage obj^ 

^bo^m, dK dient program 1001 spedfies in die bind 6S spcdficd oiiginaUy la die dieiTprogram requ^ m ^ 

^^^E^y^^'f^'^T'TL^^^'^'^'' W28.d.efimctionLmdialsdiere<^Sit^a«intoato 
object instance data is pcrsistcndy stored. This bind request pad«t In step 1029, tfte fiinctionihen r«ums d>is padcet to 
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flie server service conliol manner 1»16. This packet b then requires oiston mibsl^iig standard marshalluig. Reodl 
SSoTtothe client proiJam 1001. as described with that standard narshalfijg uses routmes sup^ by Ihe 
,^^^tTmi underiying system andtois can be executed rnthe execution 

S SI rsSgate to Create and Access a New Object context of the cUent (S^gram 1201 

no 11 is a flw diagram of the comnumication path for i buffer requires custom fflanhalimg. then the towtfon con- 

in^^a a new oWwt of a sharable dass that Is imple. tinues io step 1203, el$e it continues m step 1»6. In step 

SSk^f se^^ DLL to bl ^Md on a lemote^Sde. 1203. (he cUent program 1201 dettxmines whether custom 

^TStLSnpSS^innO. UlsftmdamentaUy »'->««««lli»8 should NperformM 

toe samew that discSssed with reference to HQ. 10. except of the dient process. » so. f«»ctian contnues m tep 

SLdffierentfunctionsareinvoked.Also.neithertheserva lo U40 to load the scr^ OIL for the custom marshalla^ 

sSiof imager m6 nor the system suppUed code the cUent proems an* to then P«rf<«»^^»V'?»^^^ 

S*?i^^s«v««ecuinbleorsui;ogateKOgramll23 Oth^t,ibcfm<^oi,toatinucsv^^^n^^^ 

with the loaded server DLL) check for an existing instance the client program 12« requests invocation fimrtwn 

^S^ZTto^ requ^ object, because the illus- SvcRemUnmkrshM i^^^^'^,!??^**^"'"?'^^ 

S^SKmrnLcationp^ assumes that a new instance is iJ 1207. The remaimng st^ U«-1206m the client program 

aeatedfor each client program request However, analogous 1201 arc analogous taHG. 7A. 

Ste function SvcA<tiv^ect in HG. 10, the function Also, steps 1210-105 '^'^^^llPf.'t^^ 

^rO«*Sbiect calls InvokeSeiver to determine whether vice contnJ managers are analogous to FIG. 7A eacq*. as 

conesponds to the mentioned, they do n« need to fet determine whether to 

^^l^^SS^^Sd^^^ to avoid 20 ^^^o-f^^^r^'^^^iiS^"^ 

iSSSfonalcopiesaftheservcroodemmecessarily. a different ftm<tion, RmUnMarshal. m the surrogate pro- 

Anoflier minor difference occurs in stq> 1127 where die cess 1223. a, «,t 

^fctoSalized with data (If thcxe is initialization data in addition, stq« m4-1227 aadmS-lSOw the sw- 
S<^^SZl^Ti^o,>^P^^^-^^ rogateFroccssl223tteanalogoustoti»suml«Y'>««^ 
SJ^?Sdl^ra UoM^^diiectly to th^ 2S steps in PIG. 7A. TTie diffcxence is that the class factor; 
^^^^Z^^Z^inVJiTM^ object coaespomBngto the marshalling dass is mstantiatcd 

aKS?S UtS;^ » Object ^^•^iS^tSJS^S'S 
anbSlim«attrf the present invention provide two types instantiated. Ato^m etep U41 (exeaited brfo« rt^ 12») 
of^arshamna- sUndard marshalUng and custom the IMarshal Interfa* mstanoe is used to unmaishal die 
™«SSffinrv^«SX^ M input buffer passed as a parameter to the RanUnMarshal 

^f^f^TS^tod^to No^lSsS. Sud ftnctlon. lite result of this custom unmarshallmg is an 

ST^fld^ svstem nrovides an inmlcmentation of the marshaUing mto an latpat buffer m rtep 1228. J^Jff^ 
i^^^S^^Z^^^»^canbc buffer containing the manhaUed int«f«ce Po^f^-bas 
^Jt^STaS unpS (marshland umna.sh.1) 3J been marshalled usi»8stat«l«rdmarsl«lttng« a^^^ 
^ sSd <ta^ « Because the und«iying through the »«vke «mtrol managers 12OT and 1216 to the 

svstm is irovidinfi tte inarshalling smpcrt, even though client program 1301. . . , m ..^n^ 

i J^^J^SS « .^^ttTidebteusted codeaS Alttiough the pre«nt invention has been descdbed in 

SS^rf the Marshal intoftce and provides defined by the daim»whidi follow. 

K^te^inE^iSi^^vi^si^ « --"^Zir^^'^^^Z 
S^tprograms thatloadthTseiverDLLcrlhepraxy code that is sl«edft a 

^camio?S^ofdataandcodeintegrily.Th«fore, ^'^^2'"'^^ l^^^c^^^^ 
wh«»cu8tominarshallingispiovided,amaybeinthedient cation of the server axle, the method compnamg. 
program's best innscst to ran the IMarshal code and the recdving from the client process a request to invdce the 
proxy DLL in a smrogiaie process. * server code; 

na 12 is a flow diagram of the commiimcation path for jn response to tfa« recdved request, invoking a surrogate 
custom unmarshaUing using a sunogate pocess. The ocsm- process with a reference to the dynamically linkable 

munications path shown ia FK}. 12 is fundamcntaUy the jjjj^ ^ gtoes the server code, ^»4ierdn the suno- 

Mune as diat discussed with lefierence to PK). 10, except that process is on independently exeeutaUe process for 

diffotnt functions are invoked. Also, the service contrd 55 loading server code that is stored in a dynamically 
managers 1207 and U16 do not need to first detennine linkable Ubraiy and that can instantiate an ol^ect; 

whether to return the location of the server WX; the dient \fyt^ the refewStced dynamically linkable library into 
pr<«iam 1201 invdoes the dient service control managr ^ invoked su«ogate process; 

1207 (Mly after determining that &e dtoBtprogramllOl ^^j^ code stored in the loaded dynami- 

wantstonmtheserva'scustcmmajMngcodewttK^^^ « ^^JJ^^i^ ^ 

Zte^^TlSStifS^^^XiJ^o"" ^toU^i^sarefcren^tothe^e*^ 

logstc process 1223 (or tnc server . ^JTIr ^ returned refereacc bang used by the 

^eSwinsW 1202 the dErogram 1201 in the 65 surrogate process by executmg die saiM cheat code 
CoSSSn^ScdDc iSt deSS whether the that is used (o tovokc the «rva^ when the server 

SS^hSSr (typicaUy passed as an input panmieter) code is exeaittog m the dient process. 
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2. The method of claim I, the oon^ter system being 
ooonected to a remote oon^icr system, and wherein the 
sucrogate process is executed on the remote computer sys- 
tem. 

3. The method of claim 2, the server code implemented 5 
according to a first architectural model, the client process 
having client code in:^>lemented according to a second 
architectural model that is incon^iatible with the first ardii- 
tectural model, the remote computer system having an 
inaction set that inq>lcmcnts the first architectural model 
of the server code, and wherein the executing of the surro- ^° 
gate process on the remote computer system is perfonncd in 
order to enable the client code to invoke the server code 
implemented according to the incompatible arcfaitectuial 
model 

4. The method of claim 1, the oonaputcr system having a 15 
service control manager responsible for process invocation, 
and wherein receiving firom the dient process the request to 
invoke the server code and invoking the surrogate process is 
performed under the control of the service control manager. 

5. The mediod of claim 4 wherein the computer system is 20 
connected to a remote oon^utcr system having a second 
service control manager process, and herein invoking fljc 
surrogate process further comprises: 

forwarding the request to invoke the server code to the 
second scrvioe control manager process; and 25 

under control of the second service control manage 
process, invoking the surrogate process on the remote 
con^Hiter system. 

6. The method of claim 4, the con^ter system being 
connected to a remote conqmt^ system, and wherein the ^ 
surrogate process is executed on the remote computer sys- 
tem. 

7. The metiiod of claim 1, further comprising, under 
control of the client jwocess, invoking the server code using 
the returned reference to the catecuting server code by using 3* 
the sanx client code that is used to invoke the servo- code 
when the server code is instead loaded in the client process. 

8. The method of daim 1, the r^uming to the client 
process the reference to the executing server code further 
compdsing: 40 



22 



creating and registering a bindmg handle that connects 

directly to the server code; and 
redmiing to ttie dient process a reference to the created 
binding handle as the ref ercnoe to the executing server 
code, 45 
9. A method in a cono^iuter system for involdng server 
code that is stored in a dynamicaUy linkable library, the 
oomjHiter system having a client (ffocess that requests invo- 
cation of the server code, the mi^od oonqxnsing: 
receiving from the client process a request to invoke the ^ 
server code; 

in response to the received request, invoking a smrogate 
process with a reference to die dynamically linkable 
library that stores the server code, wherein the surro- 
gate process is an independently executable process for 
loading saver code that is stored hi a dynamically 
linkable library and that can inici-jin tfatf an object; 

loading the referenced dynamically linkable library into 
die invoked smrogate process; ^ 

executing the server code stored in the loaded dynami- 
cally linkable library; 

creating, in the surrogate process, an object instance of a 
requested type of object inqdenaented by code stored in 
the referenced dynamicaUy linkable library; and 55 

reluming to the client process arefcrcnce to a requested 
interface of the created objea instance in the smrogate 



process, the ittOrned reference being used by the client 
process to accoe^s the requested interface of the created 
object instance in the surrogate process by executing 
the same dient todc that is used to access the requested 
interface when an instance of the requested type of 
object is created in die client process. 

10. The mediod Of claim 9, further comprising: 
under control of C^e client process, 
using the returner^ reference to the requested interface, 

requesting invocation of a method of toe requested 
interface; and 

transparently f ofiwrding the method invocation request to 
the surrogate |«Ocess, which transparendy forwards the 
method invocation request to the created object 
instance. 

11. The method <tf daim 10, the confer system being 
connected to a remote computer system, and wherein die 
surrogate process Is executed on die remote computer sys- 
tem and tcansparanfly forwarding the method invocation 
rcque^ to die surrogate process transparently forwards die 
method invocatioa request to die surrogate process execut- 
ing OQ die remote oetn^>uter systeia 

12. The metfiod of daim 9, the requested type of 6bjcct 
having persistent datn and further comprising, before letom- 
ing the reference to the requested interface, the step of 
loading die pa^stm data into the created object instance. 

13. The mediod of claim 9, fuitiier conqjri&ing, before 
returning die ref ere&ee to the requested interface, initializing 
the created object instance. 

14. The mediod of daim 9, the returning to the client 
process die referei^ to the requested interface of the created 
object instance in the surrogate process further oonqnising: 

aeating and regL^ering a binding handle that connects 
directly to the server code diat implements the 
requested intcd^ of die created object instance; and 
remming to die client process a reference to the oreated 
binding handle &s the reference to the requested inter- 
face of die creeled object instance. 

15. A mediod in ft counter system for invoking server 
code diat is stored In a dynamically liiUabie library, die 
method comprising] 

reodving fi-om a first process a request to invoke the 
server tod&\ ' 

in response to th^iftcdved request, invoking a surrogate 
process wiUi a reference to die (fynamically linkable 
library that stores die server code and widi a class 
identider, the 4lass identifier identifying a dass of 
objects with coamnon behavior and coxresponding to a 
class fartoty object, die dass factory object iiiq>le- 
mentcd by the starred server code and having a creation 
mediod for crea£lng an object of the dass of objects 
identified by the class ideatificx, wherein die surrogate 
process is an imlcpcndcndy executable process for 
loading sender code diat is stored in a ctynamically 
linkable library ^d diat can ingtAnrifltr^ an object; 

loading die referenced dynamically linkable library into 
die invoked sumigate process; 

executing the serve? code stored in the loaded dynami- 
cally linkable library; 

aeating an instant of die class factory object diat 
corresponds to ()te ciass identifier within the invoked 
surrogate process; and 
registering die aeated class factory object instance so diat 
odier processes can create object instances of die class 
of objeas identic by die dass identifier usii^ die 



08/13/2003, EAST Version: 



Is, 64 



0000 



5,802,367 

23 1 24 

acation method without knowledge that the dass fac- is received is lutiOcr Aie control of a first program, the 

tory object instance is instantiated in a different first prograni belmifting to a secunty identity for dctci- 

process, each created object instance being imple- mining the access ti^ts of the first program, whoein 

mentcd by code that is stored in the linkable Uhrary that the requesting coda from which the request to create an 

is loaded in die surrogate process. 5 object instance isreccivcd is part of a second F<«ram, 

16 The method of claim 15, further conqmsing: the second program bclongmg to a secunty identity for 

^ ^ r^^t^ on determining the access nghts or the second program, 

receiving a fr^, '^^"^^g^J^fi^ an^S inv^g the^eation method of thTreg. 

object instance of the class of objects identified by the ^^^^ass factory object instance within the su^ 

class Identifier; and p^^^ ^ performed only when the first and 

in response to the request, invoking the aeation secotid program belong to the same seoirity identity, 

of the registered class factory object instance within the ^ method of daim 15, the computer system having 

surrogate process without the requesting code having ^ m^cx process responsible far process 

knowledge that die creation mrthod is bemg executed jj^v^cation, and wheida invoking the surrogate process is 

wittiin the surrogate process. 15 ncrfcrmed under the control of the service contrd managa 

17. The method of claim 16 wherein the requestmg code l^J^ 

to aeatc the object instance is received from a process o&er ^i. jiic metiiod of daim 20, the coo5)utcr system being 

than the surrogate process, and further conqmsing: connected to a remote; conq)Uter system, and wherein the 

after receiving the request to create the object instance, surrogate pix>cess is executed on the remote conqmter sys- 

determining whedicr a dass factory objedconc^nd- ^ |^ 

ing to the dass identifier is registered; and 22.Themed)odof <(tBim 20 wherein the conqutcr system 

only when it is deleamiaed that the conesponding dass is c<mnectcd to a remtJte conqHiier system having a second 

factory objca is registoed, performing the invoking of s^vice control nianager jrooess, and wherein the step of 

the creation method of the registered dass fadoiy invoking the surrogate process further conqsises: 
object instance within the surrogate process. 25 forwarding the request to invoke the server code to the 

l&Tliemethodof claim 16, die CQinputer system being gecond service control manager process; and 

connected to a remote computer system, and whcrdn the conxx^l of ItiB second service oontrd manager 

surrogate process is executed on the rcmoto conqnitcr sys- process, invoking the surrogate process on the remote 

tem. ^ . !_. . conmutcr system. 

19. A method in a computer system for mvokmg a server 30 23.Themfithodof4aim 15, the registering of the created 

plication having server code, the method conqirlslng die factoiy object instance ftirthcr comprising creating and 

con^Mtcr-implcmcnted sieps of: registoing a binding handle to the server code that imple- 

receiving from a first process a request to invoke die ^ created cUss factory object instance. 

server ^yplication; 24* The method of claim IS, further oonqirising: 
in response to die recdved rc<iuest, invoking a sunrogate 35 ^^^tig an object ifitstanoe of the dass of objects identi- 

process with a reference to a dynamically linkable ^ Identifier; and 

library that contains die server code and with a cto rcdinring to die fif^ process an indicaSor to a requested 

identifier, the ciass idaitifier identifying a dass of interface of the created object instance, die returned 

objects widi common bdiavior and catrcsp<Hiding to a indicator being iafedl>y the first process to transparently 

dass factory object, die dass factory object implc- 40 ^^^^ methods of the requested interface of die cre- 

mented by the contained server code and containing a ^ dbitd instance instantiated in the surrogate pro- 
creation mediod f<a creating an object of die dass of 

(rt>jects identified by die dass identifier, 25. The mediod of4Iaim 24 ^^tecin die computer system 

loading the referenced dynamically linkable libraiy into ^ i^ connected to a reai«5te canqwitcr system and wherein die 

the surrogate process; surrogate process is executed on the remote conqwtcr sys- 

executing the server code contained in die loaded dynand- tern and, further cao^prising: 

cally linkable library: lecdving a request to create a second object instance of 

creating an instance of die dass fectoty object wittiin die ^ dass of obje(Ss identified by the dass identifier, and 
surrogate process corresponding to the dass identifier, ^ ^ response to die received request, transparently invoking 

rcgisteriiig the created dass fectoiy object instance so diat the creation mdSiod of die registcicd dass fwlory 

odier processes can ocate object instances of die dass objea instance t^idun the surrogate process, 

of objects identified by die dass identifier using die 26. The method of daim 25 whadn die first process from 

creation mcdiod witiwut knowledge diat die dass fac ^hich die request to invoke die server code is rtcdvcd is 

tory object instance is instantiated in a different ^^^^^ jj^^ control of a first progjcam, die first program 

process, each created object instance bdng hiqde- bdonging to a sccairiJy Identity for detcnnining die access 

mcoted'by code in the linfcahle Uhrary loaded in die jighjs of the first pr<^ram, whcrdn die request to create a 

surrogate process; second object instance is recdved from a second program, 

lecdving a request from requesting code to create an die second program bdcmging to a security identity for 
object instance of die dass of objects identified by die 60 determining die access rights of die second program, md 

dass identifier, and wherein transparcntiy invoking die creation me^ of die 

in resDonse to die request, invddng die creation mediod registered dass fa<*oiy object instMjce wititin die surrogate 

oT^J^^Tt^ process ispexfoanedonlywhendiefl^ 

^tiroffatTnToccss widiout die revesting code having bdong to die same security identity, 

^Sr^ftc^o? 27.Themediodofdaiml5wherdndiec«r^p^ 

SSn^^o^gate process, wherdn die first process is comie<*ed to aremote computer ^ ^^r^*! 

fromwhidi die request to invoke die server application invoking of die suirogate process in response to die received 
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request launches the surrogate process od the remote com- 
puter system passing the reference to the Unkahle lihraiy and 
passing the class identifier. 

28. A method in a computer system for invoking saver 
code^ the method compiislng: ^ 

receiving a request from a client process to invoke die 
server code; 

in response to the received request, determining whether 
the server code is abeady executing; 

when it is detennined that the server application is not jq 
already executing, determining whether a standalone 
executable program for the server code exists; 

when it is determined that no standalone executable 
program exists, determining whether there exists 
executable code for the server code that is stored in a 15 
linkable library and whelher it is desired to execute the 
server code in a process other than the client pwxjess; 

when it is detennined that executable code fcr the server 
code exists in a linkable library and it is desired to 
execute the server application in the process other than 20 
tbe client process, invoking a surrogate process with a 
reference to the linkable library and a list of class 
identifiers, eadi class identifier identifying a class of 
objects with common behavior and coircspondiing to a 
class factory object, each class factory object implc- 25 
mcntcd by code that Is stored in the referenced linkable 
library and having a creation method for creating an 
object of tbe dass of objects identified by the class 
identifier, wherein the surrogate process is an indepen- 
dently executable process for loading server code that 30 
is stored in a dynamically linkable library and that can 
instantiate an object; and 
under control of the invoked surrogate process, 
loading the referenced linkable library; and 
for each class identifier in the list of dass object as 
identifiers, 

creating an instance of the cocrcsponding <iass fac- 
tory 6b|ect within the surrogate process; and 
registering the created dass factory object instance 
so that othcrproccsscs can create object instances 40 
of the dass of objects identified by the class 
identifier using the creatian method. 
29. The method of claim 28 wherein Ae determining <rf 
whether it is desired to execute the saver qjplication in a 
process other tban the client process is at the 4S 

disoetion of the server application. 

3^. The method of daim 28 wherein the detcnnining of 
wlicthcr it is desired to execute the server ^yplication in a 
process other than the client process is detennined at the 
discretion of the client process. 50 

3L The naethod of claim 28, further con^srlslng, after 
determining whether a standalone cxccutabdc program for 
the server ^>plicatioa exists^ when it is dctemuned that fte 
standalone executable program exists, iaunrhing the stan- 
dalone executable program. 55 

32. The method of daim 28, the oon^uter system having 
a service control manager responsible for process 
invoc^on, and wherein the detcnnining of what code to 
invoke as the server code and invoking the detennined code 
are performed under the control of the service control 60 
manager. 

33. The method of daim 28, the computer system being 
connected to a remote computer system, and wherein the 
surrogate process is executed on the remote computer sys- 
tem. ^ 

34. A method in a computer system for invoking a 
plurality of server appUcations, each server qjplication 
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implemented by calculable saver code that is stored in a 
linkable libraiy, method comprising: 
in response to a request to invoke a first server 
application, Itrvoking a surrogate process with a refa- 
ence to the Udiablc library that stores the server code 
that implemetttS the first server plication; and 
under control of Qie smrogate process, loading the rcfa- 
cnced linkable library that stores the SCTver code that 
in^lcments tlt0 first server a|^licatton; 
in response to a request to invoke a second server 
application, dfttiermining whether the linkable b*brary 
that stores th© server code that inq)lements the second 
server ai^ca^n contains trusted is code; 
when it is detem^ed that the Unkable library that stores 
the server code that inqilements the second server 
application oemtains trusted code, requesting the 
akcady executing smrogate process to loadtiie linkable 
library tixat contains trusted code that in^>lements the 
second server ^)plicatLon; and 
loading the linkiASe binary diat contains the trusted code 
that implcmente the second server application into the 
already executZifkg surrogate process. 

35. The method <xf claim 34, further coo^aising: 
when it is deterxot&cd diat tbe linkable library that stores 

the server code diat in^lements the second server 
application docs not contain trusted cotle, invoking a 
second suirogatd process; and 
under control of Ite second surrogate process, loading the 
referenced linkable library that stores the server code 
that impl e m ents the second server application. 

36. The method of claim 34 wherein the drtamining of 
whether the linkable lihraiy that stores die server code that 
inq>lcments the secoild server app\icasi<m contains trusted 
code fiirther oompdses determining whetha the linkable 
lihraiy tiiat stores fhc server code that iniq>lemcnt5 flje 
second saver appScation can be executed in the same 

process as the linkable library that stares the saver code that 
Implements the first server ap^catioa 

37. The method of claim 36 wherein the request to in voke 
&e first server qjplksition is performed under the controJ of 
a first program, die first program bdonging to a security 
identity for dctcrmfeiing the access rights of the first 
pro-am, wherein the request to invoke the second server 
af^cadon is performed under the control of a second 
program, the second program belonging to a securi^ iden- 
tity for determining access rigjits of the second program, 
and wherein the detmuining of whether the linkable library 
that stores the servef code that implements the second server 
^jpJication contains fyusted code further conqiriscs: 

determining whettier the first j^ogram bdongs to the «i»Tw> 

security identity as the secooid program; and 
when it is dctcrmfioed that the first and second programs 
belong to the sesac security identity, reaching a result 
that the linkable fiteaiy that stores the server code tiiat 
inqlements tbe second server application contains 
trusted code. 

38. The method of claim 36 wherein the detennining of 
whedjer the stored code that inqilemcnts the second server 
application can be »ecuted in the same process is per- 
formed by table lookup. 

39. The method of daim 34 wherein the request to invoke 
the first server appUcation is performed under the control of 
a first program, the first program bdonging to a security 
identity for detennining the access rights of the first 
program, wherein the request to invoke the second server 
application is pafonncd under the control of a second 
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program, the second program belonging to a security iden- 
tity for detennining the access rights of the second program, 
and wherein the determining of whether the linkable library 
diat stores the server code that implements &e second server 
q)plication contains trusted code conqnises: 
detennining whether the first program belongs to ^c same 

security identity as the seccmd program; 
when it is determined that the first and second programs 
belong to the same security identity, reaching a result 
that the linkable lilvary that stares the server code that 
implements the second server application contains 
trusted code. 

40. The method of claim 34, the computer system having 
a service control manager responsible for process 
invocation, and wherein invoking the surrogate process is 
performed under the control of tiie service oontr<^ manager. 

41. The mc^od of r'^ttim 40, the computer system being 
connected to a remote computer system, and wherein the 
surrogate process is executed on the remote oonqniter sys- 
tem. 

42. The method of claim 40 wherein die conD|>uter system 
is connected to a remote conqHita- system having a second 
service control manager process, and wherein the stq> of 
invoking the surrogate process further com^irises the sub- 
stqw of: 

forwarding the request to invoke the server application to 
the second service control manager process; and 

under control of the second service control manager 
process, invoking die surrogate process on the remote ^ 
conqnitcr system. 

43. The method of r^nlm 34, the con^wter system being 
connected to a remote computer system, and wherein the 
surrogate process is executed on the remote computer sys- 
tem. 

44. The method of daim 34 wherein requesting the 
already executing surrogate process to load the linkable 
library that contains the trusted code that implements the 
second server i^)pllcatlott further con^irises; 
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cess without the f^esting code having knowledge that 
the creation method is being executed within the sur- 
rogate process. ' 

46. A mediod in a eDn^xiter system for unmarshaling a 
marshalled object, the imrshalled object containing a class 
identifier identifying a <tos of objects with conomon behav- 
ior and uomarshaliog code, the unmarshaling code being 
implemented by server code that corresponds to the class 
identifier, the method con^sing: 

determining whether custom unmanhaling is required to 
unmarshal the loarsballed object, wherein custom 
unmarshaling refm to unmarshaling code that imple- 
ments an unmarshdUng process that is specific to the 
scrva code; 

when it is deteiO)t&ed that custom unmarshaling is 
required, detensising the class identifier of the mar- 
shalled object; 

determining wheta^ there exists a linkable library that 
contains executSl^U server code that corresponds to the 
determined daS9 identifier, 

when it is determi&ed that the linkable Ubrary exists, 
involdng a surrogate process with a reference to the 
linkable library, Wherein the surrogate process is an 
independently executable process for loading server 
code that is stoicd in a dynamically linkable library and 
that can in.stflnti;*<^ an dbject; and 

under control of Qio invoked surrc^atc process, loading 
the linkable lihra£jr and executing tibe custom unmar- 
shaling code in tile loaded linkable library to unmarshal 
the marshalled C0^^ in a server code-specific maniwr 

47. The mediod ^ daim 46, the dass identifier of the 
marshalled object idisiitifying a dass factory object, and 
further canqsisiiig, ifltder control of the surrogate process, 
creating an instance wl&in the surrogate process of the dass 
factory object identi&ed by die determined class object 
identifier. 

48. The method daim 47, the created class factory 
object instance haVittg a creation method for creating an 
<^ject of the dass if objects identified by the determined 



providing a list of dass identifiers to tiie already executing ^ dass idcntifia, and fiirther con^jcising registering the oo- 
surrogate prxx»ss, r^ ^^ dass identifier identifying a inct«Ti.^ t^Mt n*h«- ntYicMses can 

dass of objects with common behavior and ccrre^ndr 
ing to a dass factory object, eadi dass factory object 
inqdcmcnted by code redding in the linkable library 
that contains ^e trusted code that implements the 4 ^ 
second server triplication, each dass factory containing 
a creation method for creating an object of die dass of 
objects identified by the dass identifier, and 
herein the loading of the linkable Eteaxy that contains 



the tmsted code that is^lements the second server 50 and further c omprifltltg : 



ated dass factory object instance so that other processes can 
use the creati<») method to create objed instances of the 
dass of objects identified by the determined dass identifier 
withom knowledge that the dass factory object in^ce is 
instantifltfrf in a different process. 

49. The method of daim 46, the dass identifier of die 
rpg nAallf^ nbjfcct idMttifying a dass factory object, the dass 
factory object having a creation method for creating an 
d)jed of the dass of Objects i dentified by die dass idoitifier 



ttppHcation into the surrogate process further com^ 
prises: 

for each dass identifier in the provided list cf dass 
(^ect identifiers, 

creating an instance of the corresponding dass fac- 
tory object within the surrogate process; and 
registering the created dass factory object instance 
$0 that other processes can create objed instances 
of ttie dass of objects identified by die dass 
identifier using die creation mrthnd. 
45. Hie method of claim 44, further oonquising: 
rccdving a request from requesting code to create an 
object instance of die dass of objects identified by a 
requested dass Identifier; and 
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under control of the surrogate process, 
creating an instOiace of the dass factory objed; 
using the creation method of die created dass factory 
object to cre^ an object instance of the dass of 
objects identlEed by die detennined dass identifier; 
copying data from the marshalled object into the cre- 
ated object instance; and 
returning an is^cator to a requested interface of die 
aeated abject instance. 
50. Amediod in a computer sy^emfor involdng a saver 
^)plication having sGirver code inplemented according to a 
first ardiitectural model firom dient code inq>leinentcd 
according to a seoottd arefaitectural model, the dient code 
executing In a dient process, the method conqvising the 



in response to the recdved request to create die object 65 conqjuter-inqtonerted steps <rf: . , ^ 

instoncc, invoking die creation mediod of tiicregistercd recdving from die dient process a request to invoke die 
dass factory object instance widiin die surrogate jffo- server plication; 
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in response to the received request, determining whether 
the first architectural modd of the saver code is 
compatible with the second architectural model of the 
client code, such that the server code can be executed 
in the client process; ^ 

when it is determined that the first architectural model of 
the server code is not compatible and cannot be 
executed in the client process, invoicing a surrogate 
I^ocess with a reference to a dynamically linkable 
library that contains the server code implemented 
according to the first architectural model, the sunogate 
process providing an enuilation of a CQn^>uter system 
having an instruction set that in^lements the first 
architectural model; 

loading the referenced dynamically linkable library into 

the surrogate process; 
within the surrogate process, exeorting the server code 

iiEplemcnted accoiding to the first architectural model; 

and 

20 

leturmng to the client process a reference to the executing 
server code, the client process using the lelumed lef- 
ereaoe to transparently access the server q>plication as 
if the server code were exc«iting in the client process. 
5L The method of daim 50, &e conq>uter system being 25 
connected to a remote oozqputcr system, and wherein the 
step of invoking the surrogate process invokes and executes 
the surrogate process on the ttakote conqniter system. 

5Z A computer system for invoking server code that is 
stored in a dynamically linkable Hhrary, the coiK^>ut£r sys- 30 
tern comprising: 

a surrogate process that is an independently executable 
process for loading sender code diat is stored in a 
dynamically linkable lihraty and that can instantiate an 
object, and that, in response to being invoked, 35 
loads the dynamically linkable lifar^ diat stares the 

server code; 
executes the server code; and 
returns a reference to a binding handle for the executing 
server code that can be tran^>arently used by a 40 
second fsocess to further invoke the server code 
without knowledge that the server code is being 
executed in the surrogate process; and 
an invocation merhanifmi that, in response to a request to 
invoke the server code, invokes the sunogate process 
with a reference to the ctynamically linkable library. 
53. A oonq>utcr system for invoking server code that is 
stared in a dynamicaUy linkable Hbrary, the cQmputer sys- 
tem coa^xising: 

a class factory c^ject identified by class identifier and ^ 
i]i:g>lement»l by server code stored in the linkable 
library, the class identifier identifying a class of objects 
with common behavior and containing a creation 
method fa creating an object of the class; 



30 

a surrogate pftsdbss that is an independently executable 
process for lobding server code that is stored in a 
dynamicaUy Uttlcable library and that can instantiate an 
object, and that in response to being invoked, 
loads die liidtable library diat stores the server code; 
creates an instance of the dass factosy object within the 

surrogate pocess; 
registers a bhxding handle for the created dass factory 
object insl^ce so that other processes can create 
object instaasces of the class without knowledge that 
the class ftoory object and creation method is 
executing $n the surrogate process; and 
an invocation asoq^ianism that, in response to a request to 
invoke the setver code, invokes the surrogate process 
widi a refere&ee to the linkable library and the dass 
identifier. 

54. The systenj <tf claim 53 wherein the sunogate process 
is invoked on a itosbte computer system. 

55. The system of daim 53 wherein die surrogate process 
further uses the creation method of the created dass factory 
object to create an instance of an object cf the class of 
objects identified by the dass identifier and returns a refer- 
ence to a binding htmdle for the created object instance. 

56. A corsfHiter s;i^tem for invoking a plurality of server 
ai^lications, eacfi server application implemented by 
executable code contained in a linkable library, the con^wtcr 
system comprising: 

a sunogate process that, 
in resp(»ise U> invocation. loads die linkable h*lraiy 
containing cckle implementing a first sava applica- 
tion and, 

in response to a request to load the linkable library 
io^lemend&g a second server qjplication, loads die 
linkable library containing code inqricmenting the 
second server application; and 
an invocation melanism that, 
in response to a request to invoke the first sctvct 
plication, invokes the surrogate process with a 
reference to the linkable librazy containing code 
in^lemendng the first server plication, 
in response to a request to invoke die second server 
Wlication^ drtennines whedier the linkable library 
containing cOKle implementing the second server 
application contains trusted code, and when die 
invocation medianism determines dut the linkable 
library containing code im^dementing the second 
server application contains trusted code, requests the 
invoked surrofate process to load the luikable library 
containing die trusted code inq>lementing the second 
server q^ca^on. 

» 4t 1^ 41 * 
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